# US 12,114,156 B2 · Mutual authentication for reliable configuration reception over reference signals > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,114,156 B2 - Document ID: US12114156B2 - Status: Granted - Kind: B2 - Application number: 17/818,264 - Filed: 2022-08-08 - Published: 2024-02-08 - Granted: 2024-10-08 - Earliest claimed: 2022-08-08 - Assignees: QUALCOMM Incorporated - Applicants: QUALCOMM Incorporated - Inventors: Yavuz Yapici; Tao Luo; Junyi Li - Web page: https://patentgrep.com/patent/US12114156B2 ## CPC - H04W 12/062: Pre-authentication - H04W 12/069: using certificates or pre-shared keys - H04L 9/3273: {for mutual authentication (network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869)} - H04L 41/0816: the condition being an adaptation, e.g. in response to network events - H04W 12/084: using delegated authorisation, e.g. open authorisation [OAuth] protocol - H04W 12/79: Radio fingerprint - H04L 63/0869: {for achieving mutual authentication (cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273)} - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A first network node may transmit an authentication proof to a second network node. The authentication proof may be based on a first credential associated with the first network node. The first network node may be authenticable based on the authentication proof. The second network node may identify whether the first network node is authentic based on the authentication proof. The second network node may transmit a configuration request to the first network node. The configuration request may include a phase-modulated indication of a second credential associated with the second network node. The configuration request may be based on a random phase. The second network node may be authenticable based on the configuration request. The first network node may transmit a configuration response to the second network node. The configuration response may include a phase-modulated confidential parameter. The configuration response may be based on the configuration request. ## Claims ### Claim 1 An apparatus for wireless communication at a first network node, comprising: a memory; and at least one processor coupled to the memory and, based at least in part on information stored in the memory, the at least one processor is configured to: transmit an authentication proof to a second network node, the authentication proof being based on a first credential associated with the first network node, the first network node being authenticable based on the authentication proof; receive a configuration request from the second network node, the configuration request including a phase-modulated indication of a second credential associated with the second network node, the configuration request being based on a random phase; and transmit a configuration response to the second network node, the configuration response including a phase-modulated confidential parameter, the configuration response being based on the configuration request. ### Claim 2 (depends on 1) The apparatus of claim 1, the at least one processor being further configured to: transmit an authentication request to the second network node, the authentication request including the random phase; and identify whether the second network node is authentic based on the configuration request, wherein the configuration response is transmitted to the second network node if the second network node is identified as being authentic. ### Claim 3 (depends on 2) The apparatus of claim 2, wherein the authentication request is associated with a randomly selected beam. ### Claim 4 (depends on 2) The apparatus of claim 2, wherein whether the second network node is authentic is identified based on a distribution-based hypothesis test or a Hamming distance-based similarity test. ### Claim 5 (depends on 2) The apparatus of claim 2, wherein the authentication proof is transmitted to the second network node prior to the configuration request being received from the second network node, and the configuration request is received from the second network node based on the first network node being authenticated based on the authentication proof. ### Claim 6 (depends on 5) The apparatus of claim 5, wherein the authentication proof is further based on a time index and an uninvertible one-way function. ### Claim 7 (depends on 5) The apparatus of claim 5, wherein the authentication request and the authentication proof are transmitted simultaneously and via different subcarriers. ### Claim 8 (depends on 5) The apparatus of claim 5, wherein the authentication request and the authentication proof are transmitted via adjacent time-frequency resources, and the authentication proof is further based on the random phase and a one-way hash function. ### Claim 9 (depends on 1) The apparatus of claim 1, wherein the authentication proof is transmitted to the second network node after the configuration request is received from the second network node. ### Claim 10 (depends on 9) The apparatus of claim 9, wherein the authentication proof is further based on the configuration request. ### Claim 11 (depends on 9) The apparatus of claim 9, wherein the authentication proof is associated with a plurality of tones. ### Claim 12 (depends on 1) The apparatus of claim 1, wherein the configuration request and the configuration response are each associated with a plurality of tones. ### Claim 13 (depends on 1) The apparatus of claim 1, wherein a first transmission from the first network node to the second network node is subjected to a first phase rotation associated with the first transmission that is reciprocal to a second phase rotation associated with a second transmission from the second network node to the first network node, and the second transmission is subjected to the second phase rotation. ### Claim 14 (depends on 1) The apparatus of claim 1, further comprising a transceiver coupled to the at least one processor, wherein the first network node is authenticable based on a distribution-based hypothesis test or a Hamming distance-based similarity test. ### Claim 15 A method of wireless communication at a first network node, comprising: transmitting an authentication proof to a second network node, the authentication proof being based on a first credential associated with the first network node, the first network node being authenticable based on the authentication proof; receiving a configuration request from the second network node, the configuration request including a phase-modulated indication of a second credential associated with the second network node, the configuration request being based on a random phase; and transmitting a configuration response to the second network node, the configuration response including a phase-modulated confidential parameter, the configuration response being based on the configuration request. ### Claim 16 An apparatus for wireless communication at a second network node, comprising: a memory; and at least one processor coupled to the memory and, based at least in part on information stored in the memory, the at least one processor is configured to: receive an authentication proof from a first network node, the authentication proof being based on a first credential associated with the first network node; identify whether the first network node is authentic based on the authentication proof; transmit a configuration request to the first network node, the configuration request including a phase-modulated indication of a second credential associated with the second network node, the configuration request being based on a random phase, the second network node being authenticable based on the configuration request; and receive a configuration response from the first network node based on the second network node being authenticated, the configuration response including a phase-modulated confidential parameter, the configuration response being based on the configuration request. ### Claim 17 (depends on 16) The apparatus of claim 16, the at least one processor being further configured to: receive an authentication request from the first network node, the authentication request including the random phase; obtain a physical layer (PHY) signature based on the configuration response; and demodulate a further transmission from the first network node based on the PHY signature if the first network node is identified as being authentic. ### Claim 18 (depends on 17) The apparatus of claim 17, wherein the authentication request is associated with a random beam. ### Claim 19 (depends on 17) The apparatus of claim 17, wherein the authentication proof is received from the first network node prior to the configuration request being transmitted to the first network node, and the configuration request is transmitted to the first network node if the first network node is identified as being authentic based on the authentication proof. ### Claim 20 (depends on 19) The apparatus of claim 19, wherein the authentication proof is further based on a time index and an uninvertible one-way function. ### Claim 21 (depends on 19) The apparatus of claim 19, wherein the authentication request and the authentication proof are received simultaneously and via different subcarriers. ### Claim 22 (depends on 19) The apparatus of claim 19, wherein the authentication request and the authentication proof are received via adjacent time-frequency resources, and the authentication proof is further based on the random phase and a one-way hash function. ### Claim 23 (depends on 16) The apparatus of claim 16, wherein the authentication proof is received from the first network node after the configuration request is transmitted to the first network node. ### Claim 24 (depends on 23) The apparatus of claim 23, wherein the authentication proof is further based on the configuration request. ### Claim 25 (depends on 23) The apparatus of claim 23, the at least one processor being further configured to: revoke the second credential associated with the second network node if the first network node is identified as being not authentic based on the authentication proof. ### Claim 26 (depends on 23) The apparatus of claim 23, wherein the authentication proof is associated with a plurality of tones. ### Claim 27 (depends on 16) The apparatus of claim 16, wherein the configuration request and the configuration response are each associated with a plurality of tones. ### Claim 28 (depends on 16) The apparatus of claim 16, wherein a first transmission from the first network node to the second network node is subjected to a first phase rotation associated with the first transmission that is reciprocal to a second phase rotation associated with a second transmission from the second network node to the first network node, and the second transmission is subjected to the second phase rotation. ### Claim 29 (depends on 16) The apparatus of claim 16, further comprising a transceiver coupled to the at least one processor, wherein whether the first network node is authentic is identified based on a first distribution-based hypothesis test or a first Hamming distance-based similarity test, and the second network node is authenticable based on a second distribution-based hypothesis test or a second Hamming distance-based similarity test. ### Claim 30 A method of wireless communication at a second network node, comprising: receiving an authentication proof from a first network node, the authentication proof being based on a first credential associated with the first network node; identifying whether the first network node is authentic based on the authentication proof; transmitting a configuration request to the first network node, the configuration request including a phase-modulated indication of a second credential associated with the second network node, the configuration request being based on a random phase, the second network node being authenticable based on the configuration request; and receiving a configuration response from the first network node based on the second network node being authenticated, the configuration response including a phase-modulated confidential parameter, the configuration response being based on the configuration request.